Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Staff Security Engineer role.
Rezi rewrites your resume against Curative HR LLC's job description. Free.
Tailor your resume to this Staff Security Engineer role.
Rezi rewrites your resume against Curative HR LLC's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Staff Security Engineer posting at Curative HR LLC — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Staff Security Engineer posting at Curative HR LLC — free, in seconds.
About the Role
As one of the most senior hands-on security engineers, you will focus on building and shipping production systems rather than drafting policy. You will take end-to-end ownership of our technical security architecture, building threat detection and response capabilities, embedding security into our software development lifecycle, securing our AI ecosystem and internal tools, hardening our AWS baseline, and protecting the identity, endpoint, and operational footprint used daily by our workforce. We build around multi-faceted engineers who seamlessly bridge application security, incident response, AI safety, and infrastructure hardening. You will leverage LLMs and automated AI agents within your daily execution to scale solutions across domains. Reporting directly to the VP of InfoSec and IT, you will partner closely with talented peers across software, platform, infrastructure, data, and compliance teams.
Responsibilities
- Own strategy and hands-on engineering for Detection and Response platforms; identify, onboard, and normalize all log sources including cloud, containers, endpoints, and SaaS
- Build and maintain Security Orchestration, Automation, and Response (SOAR) tooling, including AI agents for alert triage and investigation enrichment, to reduce response time and analyst toil
- Lead incident response for complex threats including developing runbooks, driving post-incident improvements, and designing/running BCP/DR tabletop exercises
- Embed security into the SDLC: threat modeling, secure design reviews, SAST/DAST tooling, AI code review, and automated security gates in CI/CD pipelines and AI processes
- Own the vulnerability management program at host and application levels; track and drive remediation
- Champion "security as code" practices across engineering teams
- Build AI-powered security tooling: threat detection and anomaly identification at appropriate confidence thresholds, automated triage and remediation workflows, and AI-assisted post-mortem summarization
- Define and implement the security model for LLM-based systems and internal AI tooling
- Architect harness patterns to constrain LLM behavior and harden against prompt injection, indirect injection via RAG pipelines, and data exfiltration via model outputs
- Evaluate and govern AI tool adoption from a security and data-risk perspective
- Own AWS security posture and enforce baselines across Linux/Windows, network devices, and enterprise SaaS (M365, Google Workspace, Azure)
- Partner with IT as a peer to protect corporate assets (identity, endpoints, enterprise SaaS) with an AI-forward lens: ship controls IT can operate, and use agents to automate access reviews, offboarding checks, and vendor onboarding
- Engineer, configure, and operate EDR, DLP, and endpoint security programs
- Provide IAM architecture expertise across identity and access systems
- Mentor and actively develop junior and mid-level security engineers through design reviews, pairing, and direct feedback
- Define and drive security engineering standards across the organization
- Collaborate closely with IT operations, platform, and software to translate threat intelligence into detection and hardening priorities
Requirements
- Software engineering or strong scripting background (Python, Go, Typescript, or shell): you write production-quality code, keep it in version control, and would rather ship a tool than file a ticket
- Depth in one or more specializations: AI Security, Product Security, Detection & Response
- 8+ years in security engineering with demonstrated growth into technical leadership
- Breadth and hands-on SIEM experience (DataDog, ELK, or equivalent)
- Breadth and hands-on AWS security and IAM expertise
- Breadth and hands-on Product security fundamentals: threat modeling, SAST/DAST, secure SDLC
- Experience building with AI/LLM APIs and practical knowledge of LLM security risks
- Breadth and hands-on experience with EDR, DLP, and vulnerability management
- Breadth and hands-on experience with containerized workloads and Kubernetes security
- Proven track record of mentoring engineers and raising team capability
Skills
- AI Security
- Product Security
- Detection & Response
- Python
- Go
- Typescript
- Shell scripting
- SIEM
- AWS security
- IAM
- Threat modeling
- SAST
- DAST
- Secure SDLC
- AI/LLM APIs
- LLM security risks
- EDR
- DLP
- Vulnerability management
- Containerized workloads
- Kubernetes security
- Mentoring engineers
Location
- Remote
Work Type
- Remote
- Full-time
Experience Level
- Senior
- 8+ years
Benefits
- Curative Health Plan (100% employer-covered medical premiums for you and 50% coverage for dependents on the base plan.)
- $0 copays and $0 deductibles (with completion of our Baseline Visit )
- Preventive and primary care built in
- Mental health support
- One-on-one care navigation
- Chronic condition programs (diabetes, weight, hypertension)
- Maternity and family planning support
- 24/7/365 Curative Telehealth
- Pharmacy benefits
- Comprehensive dental and vision coverage
- Employer-provided life and disability coverage with additional supplemental options
- Flexible spending accounts
- Generous PTO policy plus 11 paid annual company holidays
- 401K for full-time employees
- Generous Up to 8–12 weeks paid parental leave, based on role eligibility.
About the Company
- Curative is building the future of health insurance with a first-of-its-kind employer-based plan designed to remove financial barriers and make care truly accessible: one monthly premium with $0 copays and $0 deductibles*. Backed by our recent $150M in Series B funding and valuation at $1.275B, Curative is scaling rapidly and investing in AI-powered service, deeper member engagement, and a smart network designed for today’s workforce.
- Our north star guides everything we do: healthcare only works when people can actually use it. That belief drives every decision we make: from how we design our plan, support our members, to how we collaborate as a team.
- If you want to do meaningful work with a team that moves fast, experiments boldly, and cares deeply, Curative is the place to do it. We’re growing fast and looking for teammates who want to help transform health insurance for the better.